{"total":170,"rows":[{"id":"2107.06917","title":"A Field Guide to Federated Optimization","created":"2021-07-14","cited_by_count":315,"area":null},{"id":"2106.06639","title":"Federated Learning with Buffered Asynchronous Aggregation","created":"2021-06-11","cited_by_count":190,"area":null},{"id":"2303.00654","title":"How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacy","created":"2023-03-01","cited_by_count":153,"area":null},{"id":"2105.11367","title":"FedScale: Benchmarking Model and System Performance of Federated Learning at Scale","created":"2021-05-24","cited_by_count":136,"area":null},{"id":"2201.12328","title":"Toward Training at ImageNet Scale with Differential Privacy","created":"2022-01-28","cited_by_count":87,"area":null},{"id":"2110.04995","title":"The Skellam Mechanism for Differentially Private Federated Learning","created":"2021-10-11","cited_by_count":68,"area":null},{"id":"2305.18465","title":"Federated Learning of Gboard Language Models with Differential Privacy","created":"2023-05-29","cited_by_count":66,"area":null},{"id":"2202.08312","title":"Improved Differential Privacy for SGD via Optimal Private Linear Operators on Adaptive Streams","created":"2022-02-16","cited_by_count":59,"area":null},{"id":"2112.00193","title":"Public Data-Assisted Mirror Descent for Private Model Training","created":"2021-12-01","cited_by_count":49,"area":null},{"id":"2306.08153","title":"(Amplified) Banded Matrix Factorization: A unified approach to private training","created":"2023-06-13","cited_by_count":49,"area":null},{"id":"2401.10371","title":"Langevin Unlearning: A New Perspective of Noisy Gradient Descent for Machine Unlearning","created":"2024-01-18","cited_by_count":49,"area":"safety"},{"id":"2203.05363","title":"Differentially Private Learning Needs Hidden State (Or Much Faster Convergence)","created":"2022-03-10","cited_by_count":48,"area":null},{"id":"2211.06530","title":"Multi-Epoch Matrix Factorization Mechanisms for Private Machine Learning","created":"2022-11-12","cited_by_count":48,"area":null},{"id":"2111.15521","title":"Node-Level Differentially Private Graph Neural Networks","created":"2021-11-23","cited_by_count":43,"area":null},{"id":"2202.05963","title":"Private Adaptive Optimization with Side Information","created":"2022-02-12","cited_by_count":38,"area":null},{"id":"2106.07830","title":"On the Convergence and Calibration of Deep Learning with Differential Privacy","created":"2021-06-15","cited_by_count":36,"area":null},{"id":"2206.07902","title":"On Privacy and Personalization in Cross-Silo Federated Learning","created":"2022-06-16","cited_by_count":36,"area":null},{"id":"2302.03098","title":"One-shot Empirical Privacy Estimation for Federated Learning","created":"2023-02-06","cited_by_count":36,"area":null},{"id":"2310.09266","title":"User Inference Attacks on Large Language Models","created":"2023-10-13","cited_by_count":36,"area":null},{"id":"2402.13659","title":"Privacy-Preserving Instructions for Aligning Large Language Models","created":"2024-02-21","cited_by_count":35,"area":"alignment"},{"id":"2106.12576","title":"DP-SGD vs PATE: Which Has Less Disparate Impact on Model Accuracy?","created":"2021-06-22","cited_by_count":33,"area":null},{"id":"2403.00871","title":"Teach LLMs to Phish: Stealing Private Information from Language Models","created":"2024-03-01","cited_by_count":32,"area":null},{"id":"2103.06232","title":"Quantum machine learning with differential privacy","created":"2021-03-10","cited_by_count":31,"area":null},{"id":"2302.03109","title":"On the Convergence of Federated Averaging with Cyclic Client Participation","created":"2023-02-06","cited_by_count":31,"area":null},{"id":"2305.12132","title":"Can Public Large Language Models Help Private Cross-device Federated Learning?","created":"2023-05-20","cited_by_count":30,"area":null},{"id":"2406.02958","title":"PrE-Text: Training Language Models on Private Federated Data in the Age of LLMs","created":"2024-06-05","cited_by_count":29,"area":null},{"id":"2407.07737","title":"Fine-Tuning Large Language Models with User-Level Differential Privacy","created":"2024-07-10","cited_by_count":29,"area":null},{"id":"2211.05006","title":"Almost Tight Error Bounds on Differentially Private Continual Counting","created":"2022-11-09","cited_by_count":26,"area":null},{"id":"2210.02912","title":"CANIFE: Crafting Canaries for Empirical Privacy Measurement in Federated Learning","created":"2022-10-06","cited_by_count":24,"area":null},{"id":"2311.17431","title":"Grounding Foundation Models through Federated Transfer Learning: A General Framework","created":"2023-11-29","cited_by_count":24,"area":null},{"id":"2406.14322","title":"Mind the Privacy Unit! User-Level Differential Privacy for Language Model Fine-Tuning","created":"2024-06-20","cited_by_count":24,"area":null},{"id":"2202.11205","title":"Constant matters: Fine-grained Complexity of Differentially Private Continual Observation","created":"2022-02-23","cited_by_count":23,"area":null},{"id":"2211.10844","title":"Learning to Generate Image Embeddings with User-level Differential Privacy","created":"2022-11-20","cited_by_count":23,"area":null},{"id":"2310.06771","title":"Correlated Noise Provably Beats Independent Noise for Differentially Private Learning","created":"2023-10-10","cited_by_count":23,"area":null},{"id":"2403.17673","title":"How Private are DP-SGD Implementations?","created":"2024-03-26","cited_by_count":22,"area":null},{"id":"2303.17046","title":"Have it your way: Individualized Privacy Assignment for DP-SGD","created":"2023-03-29","cited_by_count":21,"area":null},{"id":"2301.09112","title":"Differentially Private Natural Language Models: Recent Advances and Future Directions","created":"2023-01-22","cited_by_count":20,"area":null},{"id":"2301.11989","title":"Practical Differentially Private Hyperparameter Tuning with Subsampling","created":"2023-01-27","cited_by_count":19,"area":null},{"id":"2212.00309","title":"Differentially Private Adaptive Optimization with Delayed Preconditioners","created":"2022-12-01","cited_by_count":18,"area":null},{"id":"2302.01463","title":"Gradient Descent with Linearly Correlated Noise: Theory and Applications to Differential Privacy","created":"2023-02-02","cited_by_count":18,"area":null},{"id":"2405.01031","title":"The Privacy Power of Correlated Noise in Decentralized Learning","created":"2024-05-02","cited_by_count":18,"area":null},{"id":"2106.09805","title":"Shuffle Private Stochastic Convex Optimization","created":"2021-06-17","cited_by_count":17,"area":null},{"id":"2210.13537","title":"Private Online Prediction from Experts: Separations and Faster Rates","created":"2022-10-24","cited_by_count":17,"area":null},{"id":"2310.15526","title":"Privacy Amplification for Matrix Mechanisms","created":"2023-10-24","cited_by_count":17,"area":null},{"id":"2404.04360","title":"Prompt Public Large Language Models to Synthesize Data for Private On-device Applications","created":"2024-04-05","cited_by_count":17,"area":null},{"id":"2404.16706","title":"Efficient and Near-Optimal Noise Generation for Streaming Differential Privacy","created":"2024-04-25","cited_by_count":17,"area":null},{"id":"2212.04680","title":"Near-Optimal Differentially Private Reinforcement Learning","created":"2022-12-09","cited_by_count":16,"area":null},{"id":"2301.04017","title":"Reconstructing Individual Data Points in Federated Learning Hardened with Differential Privacy and Secure Aggregation","created":"2023-01-09","cited_by_count":16,"area":null},{"id":"2411.04205","title":"Scalable DP-SGD: Shuffling vs. Poisson Subsampling","created":"2024-11-06","cited_by_count":16,"area":null},{"id":"2510.15001","title":"VaultGemma: A Differentially Private Gemma Model","created":"2025-10-15","cited_by_count":16,"area":null},{"id":"2307.08970","title":"A Unifying Framework for Differentially Private Sums under Continual Observation","created":"2023-07-18","cited_by_count":15,"area":null},{"id":"2410.08892","title":"Federated Learning in Practice: Reflections and Projections","created":"2024-10-11","cited_by_count":15,"area":null},{"id":"2502.08202","title":"Privacy amplification by random allocation","created":"2025-02-12","cited_by_count":15,"area":null},{"id":"2403.17105","title":"Certified Machine Unlearning via Noisy Stochastic Gradient Descent","created":"2024-03-25","cited_by_count":14,"area":"safety"},{"id":"2412.16802","title":"Balls-and-Bins Sampling for DP-SGD","created":"2024-12-21","cited_by_count":14,"area":null},{"id":"2504.16438","title":"POPri: Private Federated Learning using Preference-Optimized Synthetic Data","created":"2025-04-23","cited_by_count":14,"area":"alignment"},{"id":"2110.03450","title":"Efficient and Private Federated Learning with Partially Trainable Networks","created":"2021-10-06","cited_by_count":13,"area":null},{"id":"2309.05505","title":"Share Your Representation Only: Guaranteed Improvement of the Privacy-Utility Tradeoff in Federated Learning","created":"2023-09-11","cited_by_count":13,"area":null},{"id":"2310.19973","title":"Unified Enhancement of Privacy Bounds for Mixture Mechanisms via $f$-Differential Privacy","created":"2023-10-30","cited_by_count":13,"area":null},{"id":"2302.12909","title":"Differentially Private Algorithms for the Stochastic Saddle Point Problem with Optimal Rates for the Strong Gap","created":"2023-02-24","cited_by_count":12,"area":null},{"id":"2306.09666","title":"A Smooth Binary Mechanism for Efficient Private Continual Observation","created":"2023-06-16","cited_by_count":12,"area":null},{"id":"2401.00583","title":"Improving the Privacy and Practicality of Objective Perturbation for Differentially Private Linear Learners","created":"2023-12-31","cited_by_count":12,"area":null},{"id":"2405.13763","title":"Banded Square Root Matrix Factorization for Differentially Private Model Training","created":"2024-05-22","cited_by_count":12,"area":null},{"id":"2410.03883","title":"DiSK: Differentially Private Optimizer with Simplified Kalman Filter for Noise Reduction","created":"2024-10-04","cited_by_count":11,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2210.06328","title":"Momentum Aggregation for Private Non-convex ERM","created":"2022-10-12","cited_by_count":10,"area":null},{"id":"2210.07876","title":"Control, Confidentiality, and the Right to be Forgotten","created":"2022-10-14","cited_by_count":10,"area":"safety"},{"id":"2302.09183","title":"Learning with Impartiality to Walk on the Pareto Frontier of Fairness, Privacy, and Utility","created":"2023-02-17","cited_by_count":10,"area":null},{"id":"2307.11228","title":"From Adaptive Query Release to Machine Unlearning","created":"2023-07-20","cited_by_count":10,"area":"safety"},{"id":"2308.00263","title":"Asynchronous Federated Learning with Bidirectional Quantized Communications and Buffered Aggregation","created":"2023-08-01","cited_by_count":10,"area":null},{"id":"2210.02910","title":"Federated Boosted Decision Trees with Differential Privacy","created":"2022-10-06","cited_by_count":9,"area":null},{"id":"2302.14154","title":"Near-Optimal Algorithms for Private Online Optimization in the Realizable Regime","created":"2023-02-27","cited_by_count":9,"area":null},{"id":"2402.19437","title":"Differentially Private Worst-group Risk Minimization","created":"2024-02-29","cited_by_count":9,"area":null},{"id":"2408.08868","title":"A Hassle-free Algorithm for Private Learning in Practice: Don't Use Tree Aggregation, Use BLTs","created":"2024-08-16","cited_by_count":9,"area":null},{"id":"2206.09264","title":"Pisces: Efficient Federated Learning via Guided Asynchronous Training","created":"2022-06-18","cited_by_count":8,"area":null},{"id":"2408.13460","title":"DOPPLER: Differentially Private Optimizers with Low-pass Filter for Privacy Noise Reduction","created":"2024-08-24","cited_by_count":8,"area":null},{"id":"2410.01068","title":"Convergent Privacy Loss of Noisy-SGD without Convexity and Smoothness","created":"2024-10-01","cited_by_count":8,"area":null},{"id":"2204.08345","title":"Extracting Targeted Training Data from ASR Models, and How to Mitigate It","created":"2022-04-18","cited_by_count":7,"area":null},{"id":"2412.07093","title":"Streaming Private Continual Counting via Binning","created":"2024-12-10","cited_by_count":7,"area":null},{"id":"2505.12128","title":"Back to Square Roots: An Optimal Bound on the Matrix Factorization Error for Multi-Epoch Differentially Private SGD","created":"2025-05-17","cited_by_count":7,"area":null},{"id":"2211.11896","title":"Private Ad Modeling with DP-SGD","created":"2022-11-21","cited_by_count":6,"area":null},{"id":"2307.15017","title":"Samplable Anonymous Aggregation for Private Federated Data Analysis","created":"2023-07-27","cited_by_count":6,"area":null},{"id":"2310.03447","title":"FLAIM: AIM-based Synthetic Data Generation in the Federated Setting","created":"2023-10-05","cited_by_count":6,"area":null},{"id":"2407.05237","title":"Privacy of the last iterate in cyclically-sampled DP-SGD on nonconvex composite losses","created":"2024-07-07","cited_by_count":6,"area":null},{"id":"2411.10614","title":"To Shuffle or not to Shuffle: Auditing DP-SGD with Shuffling","created":"2024-11-15","cited_by_count":6,"area":null},{"id":"2411.18752","title":"Locally Differentially Private Online Federated Learning With Correlated Noise","created":"2024-11-27","cited_by_count":6,"area":null},{"id":"2503.10945","title":"Gaussian DP for Reporting Differential Privacy Guarantees in Machine Learning","created":"2025-03-13","cited_by_count":6,"area":null},{"id":"2507.01129","title":"On Design Principles for Private Adaptive Optimizers","created":"2025-07-01","cited_by_count":6,"area":null},{"id":"2210.11222","title":"Learning-Augmented Private Algorithms for Multiple Quantile Release","created":"2022-10-20","cited_by_count":5,"area":null},{"id":"2302.12559","title":"From Noisy Fixed-Point Iterations to Private ADMM for Centralized and Federated Learning","created":"2023-02-24","cited_by_count":5,"area":null},{"id":"2307.10999","title":"Private Federated Learning with Autotuned Compression","created":"2023-07-20","cited_by_count":5,"area":null},{"id":"2502.06597","title":"Continual Release Moment Estimation with Differential Privacy","created":"2025-02-10","cited_by_count":5,"area":null},{"id":"2506.16666","title":"The Hitchhiker's Guide to Efficient, End-to-End, and Tight DP Auditing","created":"2025-06-20","cited_by_count":5,"area":null},{"id":"2210.16947","title":"Two Models are Better than One: Federated Learning Is Not Private For Google GBoard Next Word Prediction","created":"2022-10-30","cited_by_count":4,"area":null},{"id":"2402.08012","title":"Online Differentially Private Synthetic Data Generation","created":"2024-02-12","cited_by_count":4,"area":null},{"id":"2404.10764","title":"Confidential Federated Computations","created":"2024-04-16","cited_by_count":4,"area":null},{"id":"2405.02341","title":"Improved Communication-Privacy Trade-offs in $L_2$ Mean Estimation under Streaming Differential Privacy","created":"2024-05-02","cited_by_count":4,"area":null},{"id":"2407.03289","title":"Correlated Privacy Mechanisms for Differentially Private Distributed Mean Estimation","created":"2024-07-03","cited_by_count":4,"area":null},{"id":"2601.10237","title":"Fundamental Limitations of Favorable Privacy-Utility Guarantees for DP-SGD","created":"2026-01-15","cited_by_count":4,"area":null},{"id":"2110.12770","title":"DP-XGBoost: Private Machine Learning at Scale","created":"2021-10-25","cited_by_count":3,"area":null}],"next_cursor":"100"}